puppet-prod

Files

T

unkin-agent 47e3bdc8f5 Add router role for prodnxsr0020 (#536 )

prodnxsr0020 runs FRR/OSPF hand-configured; bring its routing config under puppet without touching interfaces, firewall or dnsmasq.

- add roles::infra::network::router (base + frrouting + frr_exporter)
- enable ip_forward and disable rp_filter via sysctl::base
- add prodnxsr0020 OSPF config (dum0, dum1, bond0.201; src 198.18.21.160)
- pin dns, consul and router-id to dum0 instead of the WAN-facing primary IP
- listen sshd on 127.0.0.1 and dum0 only, knocking out the common WAN primary IP
- keep resolv.conf on the local dnsmasq (127.0.0.1)

Reviewed-on: #536
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-03 22:40:01 +10:00

country/au/region

chore: update dns nameserver in dhcp (#507 )

2026-08-06 22:23:51 +10:00

nodes

Add router role for prodnxsr0020 (#536 )

2026-10-03 22:40:01 +10:00

Shorten metadata_expire on internal RPM repos (#526 )

2026-09-20 00:55:19 +10:00

roles

Add router role for prodnxsr0020 (#536 )

2026-10-03 22:40:01 +10:00